U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results (Refine Search)

Search Parameters:
  • Results Type: Overview
  • Keyword (text search): cpe:2.3:o:qualcomm:qcm6125_firmware:-:*:*:*:*:*:*:*
  • CPE Name Search: true
There are 384 matching records.
Displaying matches 1 through 20.
Vuln ID Summary CVSS Severity
CVE-2025-21453

Memory corruption while processing a data structure, when an iterator is accessed after it has been removed, potential failures occur.

Published: May 06, 2025; 5:15:22 AM -0400
V4.0:(not available)
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2024-49835

Memory corruption while reading secure file.

Published: May 06, 2025; 5:15:21 AM -0400
V4.0:(not available)
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2025-21424

Memory corruption while calling the NPU driver APIs concurrently.

Published: March 03, 2025; 6:15:15 AM -0500
V4.0:(not available)
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2024-53027

Transient DOS may occur while processing the country IE.

Published: March 03, 2025; 6:15:14 AM -0500
V4.0:(not available)
V3.1: 7.5 HIGH
V2.0:(not available)
CVE-2024-53024

Memory corruption in display driver while detaching a device.

Published: March 03, 2025; 6:15:13 AM -0500
V4.0:(not available)
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2024-53014

Memory corruption may occur while validating ports and channels in Audio driver.

Published: March 03, 2025; 6:15:13 AM -0500
V4.0:(not available)
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2024-43051

Information disclosure while deriving keys for a session for any Widevine use case.

Published: March 03, 2025; 6:15:11 AM -0500
V4.0:(not available)
V3.1: 5.5 MEDIUM
V2.0:(not available)
CVE-2024-38426

While processing the authentication message in UE, improper authentication may lead to information disclosure.

Published: March 03, 2025; 6:15:11 AM -0500
V4.0:(not available)
V3.1: 5.3 MEDIUM
V2.0:(not available)
CVE-2024-49843

Memory corruption while processing IOCTL from user space to handle GPU AHB bus error.

Published: February 03, 2025; 12:15:20 PM -0500
V4.0:(not available)
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2024-49838

Information disclosure while parsing the OCI IE with invalid length.

Published: February 03, 2025; 12:15:20 PM -0500
V4.0:(not available)
V3.1: 7.5 HIGH
V2.0:(not available)
CVE-2024-45584

Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.

Published: February 03, 2025; 12:15:19 PM -0500
V4.0:(not available)
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2021-30299

Possible out of bound access in audio module due to lack of validation of user provided input.

Published: November 22, 2024; 5:15:04 AM -0500
V4.0:(not available)
V3.1: 6.7 MEDIUM
V2.0:(not available)
CVE-2024-38424

Memory corruption during GNSS HAL process initialization.

Published: November 04, 2024; 5:15:09 AM -0500
V4.0:(not available)
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2024-38423

Memory corruption while processing GPU page table switch.

Published: November 04, 2024; 5:15:09 AM -0500
V4.0:(not available)
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2024-38422

Memory corruption while processing voice packet with arbitrary data received from ADSP.

Published: November 04, 2024; 5:15:08 AM -0500
V4.0:(not available)
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2024-38421

Memory corruption while processing GPU commands.

Published: November 04, 2024; 5:15:08 AM -0500
V4.0:(not available)
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2024-38419

Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.

Published: November 04, 2024; 5:15:08 AM -0500
V4.0:(not available)
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2024-38408

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

Published: November 04, 2024; 5:15:07 AM -0500
V4.0:(not available)
V3.1: 9.1 CRITICAL
V2.0:(not available)
CVE-2024-21455

Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.

Published: October 07, 2024; 9:15:10 AM -0400
V4.0:(not available)
V3.1: 7.8 HIGH
V2.0:(not available)
CVE-2024-38402

Memory corruption while processing IOCTL call for getting group info.

Published: September 02, 2024; 8:15:19 AM -0400
V4.0:(not available)
V3.1: 7.8 HIGH
V2.0:(not available)